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DETAILED ACTION 

1. Currently pending claims are 1, 4 -9, 12 - 16, 19, 22-26, 29-33, 36, 
39-43, 46 and 179- 182. 

Response to Arguments 

2. Applicant's arguments with respect to the subject matter of the instant 
claims have been fully considered but are not persuasive. 

3. As per claim 1, 19, 36 and 46, Applicant asserts "a cryptography process 
section configured to split a first portion of header data of the content data having 
data on usage policy into a plurality of first messages, generate a first integrity 
check value or values to verify integrity of header data by using said plurality of 
first messages". Examiner respectfully disagrees. Ginter teaches that a first 
portion of header data of the content data having data on usage policy such as 
PERC (Permission Record) (Ginter: Figure 17 / Element 808) is split into a 
plurality of first messages such as Required Method Record 1, Required Method 
Record 2 and so on (Ginter: Figure 26A / Element 924(o)(a), 924(o)(b) and so 
on) and an integrity check value associated with each individual Required 
Method Record N (Ginter: Figure 26A / Element Element 924(o)(a)(1): there is a 
check value located within each individual Required Method Record N) as well as 
an overall integrity check value (Ginter: Figure 26A / Element 980) are generated 
to verify integrity of header data by using said plurality of first messages (i.e. said 
plurality of Required Method Records) (Ginter: Column 153'Line 9 - 13 / Line 28 
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- 31). Therefore, Ginter does teach a cryptography process section configured 
to split a first portion of header data of the content data having data on usage 
policy into a plurality of first messages, generate a first integrity check value or 
values to verify integrity of header data by using said plurality of first messages 
and as such Applicant's arguments are respectfully traversed. 

Claim Rejections - 35 USC §102 

The following is a quotation of the appropriate paragraph of 35 U.S.C. 102 
that forms the basis for the rejections under this section made in this Office 
action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 
122(b), by another filed in the United States before the invention by the applicant for patent or 
(2) a patent granted on an application for patent by another filed in the United States before 
the invention by the applicant for patent, except that an international application filed under 
the treaty defined in section 351(a) shall have the effects for purposes of this subsection of an 
application filed in the United States only if the international application designated the United 
States and was published under Article 21(2) of such treaty in the English language. 

4. Claims 1, 4, 7, 12, 16, 19, 22, 24, 29, 33, 36, 39, 41 and 46 are rejected 
under 35 U.S.C; 102(e) as being anticipated by Ginter et al. (U.S. Patent 
6,253,193). 

As per claim 1, 19, 36 and 46, Ginter teaches a data processing apparatus 
for processing content data provided by a recording or communication medium, 
characterized in that said apparatus comprises: 

a cryptography process section for executing a cryptography process on 
said content data (Ginter: Column 15 Line 37 - 38); and 
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a control section for executing control for said cryptography process 
section (Ginter: Column 5 Line 24 - 27 and Column 6 Line 17-31), and 

said cryptography process section is configured to: 

split a first portion of header data of the content data having data on usage 
policy into a plurality of first messages (Ginter: Figure 17 / Element 808, Figure 
26A / Figure 26A / Element 924(o)(a), 924(o)(b) and so on): Ginter teaches that a 
first portion of header data of the content data having data on usage policy such 
as PERC (Permission Record) (Ginter: Figure 17 / Element 808) is split into a 
plurality of first messages such as Required Method Record 1, Required Method 
Record 2 and so on (Ginter: Figure 26A / Element 924(o)(a), 924(o)(b) and so 
on)); 

generate a first integrity check value or values to verify integrity of the 
header data by using said plurality of first messages are generated to verify 
integrity of header data by using said plurality of first messages (Ginter: Figure 
26A/ Element 924(o)(a)(1), Column 153 Line 9 - 13 / Line 28-31, Figure 17, 
Column 149 Line 1 - 7, Figure 26A Element 978 and Column 217 Line 51 - 52 / 
Line 59 - 60: there is a check value located within each individual Required 
Method Record N as well as an overall integrity check value (Ginter: Figure 26A / 
Element 980)); 

collate said first integrity check value or values to verify said first portion of 
header data (Ginter: Figure 26A / Element 924(o)(a)(1 ), Column 1 53 Line 9-13/ 
Line 28 - 3, Column 217 Line 51 - 52 / Line 59 - 60), 
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split a second header portion of the header data of the content data 
having a content key (Ginter: Figure 17 / Element 810) into a plurality of second 
messages (Ginter: Figure 26A / Element 906(a), 906(b) and so on & Figure 26B / 
Element 912); 

generate a second integrity check value or values to verify integrity of the 
header data by using said plurality of second messages (Ginter: Figure 26A / 
Element 906a/b, Figure 26B Element 912 / Element 994: Note: Figure 26B, 
(which includes content keys), Figure 17, Column 153 Line 9 - 13 / Line 28 - 3, 
Column 149 Line 1 -7), 

collate said second integrity value or values to verify said second portion 
of the header data (Ginter: Figure 26A / Element 906a/b, Figure 26B Element 
912 / Element 994, Column 217 Line 51 - 52 / Line 59 - 60: check value for 
content key block), 

generate an intermediate integrity check value based on said first integrity 
check value or values and said second integrity check value or values (Ginter: 
Figure 26A / Element 980, and Column 1 53 Line 9-13), and 

use the generated intermediate integrity check value to verify said content 
data corresponding to said first and second integrity check values (Ginter: 
Column 153 Line 9-13 and Column 217 Line 51 - 52 / Line 59-60). 

As per claim 4, 22 and 39, Ginter teaches said cryptography process is a 
DES cryptography process, and said cryptography process section is configured 
to execute the DES cryptography process (Ginter: Column 22 Line 8-13). 
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As per claim 7, 24 and 41 , Ginter teaches said data processing apparatus 
has a signature key, and said cryptography process section: is configured to 
apply a value generated from said intermediate value by means of said signature 
key-applied cryptography process as a collation value for data verification 
(Ginter: Column 22 Line 12 - 25). 

As per claim 12 and 29, Ginter teaches a recording device for storing data 
validated by said cryptography process section (Ginter: Column 28 Line 38 - 41). 

As per claim 16 and 33, Ginter teaches collating only the header section 
integrity check values in the data during the process executed by said 
cryptography process section to collate said first integrity check values and said 
second integrity check values (Ginter: Figure 17, Column 149 Line 1 - 7, Figure 
26A Element 978 and Column 217 Line 51 - 52 / Line 59 - 60 and Figure 26B 
Element 912 / Element 994: Note: Figure 26B, which includes content key, is an 
example of one of right records). 

transmitting data for which collation of the header section integrity check 
values has been established, to said reproduction process section for 
reproduction (Ginter: Column 28 Line 38 -41 and Ginter: Figure 17, Column 149 
Line 1 - 7, Figure 26A Element 978 and Column 217 Line 51 - 52 / Line 59 - 60: 
the data is decrypted (and copied to CD-ROM subsequently) only after the 
header section check value (or validation tag) is not tempered). 
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As per claim 1 79 and 181, Ginter teaches the plurality of messages 
provide multiple input data for a staged encryption (Ginter: Column 129 Line 18 - 
20: the PERC and Key Blocks can also be encrypted). 

As per claim 180 and 182, Ginter teaches the first and second integrity 
check values are added to the header of the content data (See the same 
rationale of rejections on claim 1). 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 
all obviousness rejections set forth in this Office action: 

A person shall be entitled to a patent unless - 

(a) A patent may not be obtained though the invention is not identically disclosed or described 
as set forth in section 102 of this title, if the differences between the subject matter sought to 
be patented and the prior art are such that the subject matter as a whole would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 

5. Claims 5, 6, 23 and 40 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Ginter et al. (U.S. Patent 6,253,1 93), in view of Teppler (U.S. 
Patent 6,898,709). 

As per claim 5, 23 and 40, Ginter does not disclose expressly said partial 
integrity check value is a message authentication code (MAC) generated in an 
DES-CBC mode using partial data to be checked, as a message, said 
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intermediate value is a message authentication code (MAC) generated in a DES- 
CBC mode using a partial integrity check value set data string to be checked, as 
a message, and said cryptography process section is configured to execute the 
cryptography process in the DES-CBS mode. 

Teppler teaches said partial integrity check value is a message 
authentication code (MAC) generated in an DES-CBC mode using partial data to 
be checked, as a message, said intermediate value is a message authentication 
code (MAC) generated in a DES-CBC mode using a partial integrity check value 
set data string to be checked, as a message, and said cryptography process 
section is configured to execute the cryptography process in the DES-CBS mode 
(Teppler: Column 30 Line 48 - 53). 

It would have been obvious to a person of ordinary skill in the art at the 
time the invention was made to combine the teaching of Teppler within the 
system of Ginter because Teppler teaches providing the assurance of the 
integrity of digital data files with enhanced fraud prevention mechanisms 
(Teppler: Column 16 Line 36 - 52). 

As per claim 6, Ginter as modified teaches in the DES-CBC mode-based 
cryptography process configuration of said cryptography process section, Triple 
DES is applied only in part of a message string to be processed (Teppler: 
Column 30 Line 48 - 53 and (Teppler: Column 7 Line 12 - 24). 
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6. Claims 8, 25 and 42 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Ginter et al. (U.S. Patent 6,253,193), in view of Orrin (U.S. 
Patent 6,01 1,849). 


As per claim 8, 25 and 42, Ginter does not disclose expressly said data 
processing apparatus has a plurality of different signature keys as signature 
keys, and said cryptography process section: is configured to apply one of said 
plurality of different signature keys which is selected depending on a localization 
of said content data, to the cryptography process for said intermediate integrity 
check value to obtain the collation value for data verification. 

Orrin teaches said data processing apparatus has a plurality of different 
signature keys as signature keys, and said cryptography process section: is 
configured to apply one of said plurality of different signature keys which is 
selected depending on a localization of said content data, to the cryptography 
process for said intermediate integrity check value to obtain the collation value 
for data verification (Orrin: Column 7 Line 13-16, Column 7 Line 30-41 and 
Column 8 Line 54 - 67). 

It would have been obvious to a person of ordinary skill in the art at the 
time the invention was made to combine the teaching of Orrin within the system 
of Ginter because Orrin teaches providing an easy-to-use interface and easy-to- 
integrate environment for file and document encryption including partial content 
encryption during communications and the assurance of the integrity of digital 
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data files with enhanced fraud prevention mechanisms (Orrin: Column 3 Line 4 - 
1 1 and Column 16 Line 36 - 52). 

7. Claims 9, 26 and 43 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Ginter et al. (U.S. Patent 6,253,193), in view of Orrin (U.S. 
Patent 6,011,849), and in view of Kuroda (Patent Number: 6915434). 

As per claim 9, 26 and 43, Ginter as modified does not disclose expressly 
said data processing apparatus has a common signature key common to all 
entities of a system for executing a data verifying process and an apparatus- 
specific signature key specific to each apparatus that executes a data verifying 
process. 

Kuroda teaches said data processing apparatus has a common signature 
key common to all entities of a system for executing a data verifying process and 
an apparatus-specific signature key specific to each apparatus that executes a 
data verifying process (Kuroda: Abstract Line 1-10); 

said selecting step being based on the location of said content data (Orrin: 
Abstract Line 7-8, Column 7 Line 13-16, Column 7 Line 30 - 41 and Column 
8 Line 54 -67). 

It would have been obvious to a person of ordinary skill in the art at the 
time the invention was made to combine the teaching of Kuroda within the 
system of Ginter as modified because Kuroda teaches providing a key 
management function in an electronic data storage system for guaranteeing the 
security of electronic data by changing the key used in a process of encrypting 
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electronic data in document form in a local environment and a global 
environment (Kuroda: Column 1 Line 10 - 16). 

8. Claims 13 - 15 and 30 - 32 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Ginter et al. (U.S. Patent 6,253,193), in view of Bodo (Patent 
Number: 5680587). 

As per claim 13 and 30, Ginter does not disclose expressly said control 
section suspends storing of aid data in said recording device if a process of 
collating said first integrity check values and said second integrity check values is 
not established in said cryptography process executed by said cryptography 
process section. 

Bodo teaches said control section suspends storing of said data in said 
recording device if a process of collating said first integrity check values and said 
second integrity check values is not established in said cryptography process 
executed by said cryptography process section (Bodo: Column 13 Line 16 - 25). 

It would have been obvious to a person of ordinary skill in the art at the 
time the invention was made to combine the teaching of Bodo within the system 
of Ginter because (a) Ginter discloses invoking secure digital data content 
backup to removable media such as CD-ROM (Ginter: Column 28 Line 38-41) 
and (b) Bodo teaches an enhanced-performance removable media subsystem 
for securely recording the digital data (Bodo: Column 1 3 Line 1 6 - 25). 
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As per claim 14 and 31, claims Hand 31 do not further teach overclaims 
1 3 as addressed above 

As per claim 15 and 32, claims 15 and 32 do not further teach over claims 
13 as addressed above 

Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of 
time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire 
THREE MONTHS from the mailing date of this action. In the event a first reply is 
filed within TWO MONTHS of the mailing date of this final action and the advisory 
action is not mailed until after the end ofthe THREE-MONTH shortened statutory 
period, then the shortened statutory period will expire on the date the advisory 
action is mailed, and any extension fee pursuant to 37 CFR 1 .136(a) will be 
calculated from the mailing date ofthe advisory action. In no event, however, will 
the statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 
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Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Longbit Chai whose telephone number is 
571-272-3788. The examiner can normally be reached on Monday-Friday 
8:00am-4:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Ayaz R. Sheikh can be reached on 571-272-3795. The 
fax phone number for the organization where this application or proceeding is 
assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from 
the Patent Application Information Retrieval (PAIR) system. Status information 
for published applications may be obtained from either Private PAIR or Public 
PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair- 
direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll- 
free). If you would like assistance from a USPTO Customer Service 
Representative or access to the automated information system, call 800-786- 
9199 (IN USA OR CANADA) or 571-272-1000. 
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